Chrome Will Block 'HTTP://' Content On 'HTTPS://' Sites

In an attempt to keep user data away from prying eyes and more secured, Google is making changes in its browser security settings. According to a blog post published by the Chrome security team, pages with "https://" will be the one and only that can load sub-resources from "https://". This will come gradually with a series of steps, so you won’t see it happen overnight.

As reported by Google, users spend more than 90 percent on HTTPS while browsing the Internet via Chrome on any major platform. However, those secure pages are sometimes prone to sub-resources from insecure HTTP. Although Chrome will block these sub-resources by default, concerns over them should not be ignored. There are still ways for some sneak-in to engage, for example, they appear in the form of video, audio, images, and “mixed content.” Something called “mixed content” is likely to put you in a load of risky situations.

As from the Chrome 79 version, Chrome will default to block all mixed content. The following changes will be deployed incrementally to make the process more smoothly. As such, Chrome 79 will offer a new setting to specific sites, at which users can unblock mixed content in late 2019. Early next year, it will auto-upgrade HTTPS with all mixed content including video and audio resources. If they don’t load over HTTPS, it will block them automatically. Finally, Chrome 81 will be scheduled to auto-upgrade all mixed images into HTTPS. If those things don’t get along with HTTPS, the same will happen as with audio and video.

If these plans are done with no error, it’s kind of helpful for users when not having to mind about sub-resources anymore. However, keeping an eye out for threats will never be needless for you.